Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
File: auug8jdBINVPpbzcKp0kUUFy6m0.mft (raw, json)
Hash identifier: 1Dp1EYxnuz9w70HZ4SMahfcnzHAq9Z0XLTq2e6oZn9I=
Subject key identifier: D4:BC:3E:82:16:B4:E5:F6:3C:7B:5F:78:87:BE:F8:0D:8C:32:2F:EE
Authority key identifier: 6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
Certificate issuer: /CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Certificate serial: 01983683604345A7C37E365790B3573D42C4
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
Manifest number: 10AB
Signing time: Wed 23 Jul 2025 09:00:36 +0000
Manifest this update: Wed 23 Jul 2025 09:00:36 +0000
Manifest next update: Thu 24 Jul 2025 09:00:36 +0000
Files and hashes: 1: auug8jdBINVPpbzcKp0kUUFy6m0.crl (hash: Lg9+W/OVcA3C1p1rweRYrU5lIc/8WTiTy8WFlMVbpeI=)
2: cnQVVqPjrlGXZ4bRJUOH3uMmisQ.roa (hash: ctdicnlvbHDU3uh0Yfd3l/2DNRusbBU6IrhnO1MfguA=)
3: y6i-tAs710JU3OPP1HFORxr_Jiw.roa (hash: CVxy94IGu0ygQZ+HNm6h6Qx4sxvXtiP38hrFG8fWoyY=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Thu 24 Jul 2025 07:00:25 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:36:83:60:43:45:a7:c3:7e:36:57:90:b3:57:3d:42:c4
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=6aeba0f2374120d54fa5bcdc2a9d24514172ea6d
Validity
Not Before: Jul 23 09:00:36 2025 GMT
Not After : Jul 24 09:00:36 2025 GMT
Subject: CN=d4bc3e8216b4e5f63c7b5f7887bef80d8c322fee
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c6:ec:cc:f4:39:cb:32:ab:18:2c:2f:0a:80:8a:
c2:18:54:56:58:34:de:d6:8b:5a:47:74:3c:50:a7:
85:43:d9:5a:c1:2f:ec:c8:14:f2:75:02:fb:9e:40:
9f:32:14:d6:03:c5:e7:be:9a:f2:ff:2b:2d:5b:c7:
12:2b:73:17:e3:53:20:ab:bb:a3:1c:8f:65:33:40:
57:84:c5:12:bb:3b:f5:07:fe:4c:09:45:33:77:c0:
49:bf:6b:65:b0:db:af:07:20:5c:f0:7a:07:de:17:
7d:ce:d0:ff:72:6a:fa:4b:d1:b8:fd:a7:39:2a:13:
41:8b:72:f6:07:1c:20:f5:79:5b:c1:03:16:62:38:
0d:b6:0f:38:67:d1:50:1d:22:f9:49:d3:81:8a:b2:
0d:b7:34:73:53:aa:25:b7:0f:f1:35:e9:cf:17:98:
0a:4e:66:55:d8:95:43:d6:c5:94:21:d3:e9:94:ff:
be:d4:49:07:1d:21:77:8f:7d:c0:4b:a9:e7:5f:a6:
10:b3:d6:1e:e7:e5:46:b7:31:37:bc:ea:77:47:8d:
a3:b1:63:0a:6e:07:e2:2b:2e:4a:cc:94:a0:c7:1a:
7c:76:d7:2e:72:85:46:b3:dc:08:f7:5c:10:65:7a:
d3:d0:ef:02:01:ee:92:7a:1f:80:30:71:8b:3a:26:
d3:59
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D4:BC:3E:82:16:B4:E5:F6:3C:7B:5F:78:87:BE:F8:0D:8C:32:2F:EE
X509v3 Authority Key Identifier:
keyid:6A:EB:A0:F2:37:41:20:D5:4F:A5:BC:DC:2A:9D:24:51:41:72:EA:6D
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/auug8jdBINVPpbzcKp0kUUFy6m0.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/ed/afae93-e79f-499f-9203-0fe8bd6556d5/1/auug8jdBINVPpbzcKp0kUUFy6m0.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
7e:45:a6:73:f4:c4:8f:80:90:ca:00:6a:a3:55:c1:d2:d3:57:
b4:90:2c:cc:35:82:12:da:b9:f7:8b:b5:65:e1:ea:9b:60:1c:
b1:60:e2:0b:98:80:cb:d1:97:9d:d3:16:da:23:0d:7a:0f:97:
6f:43:a8:2c:8c:1e:7c:73:96:f9:26:bf:39:4c:40:1f:45:af:
86:71:c3:8b:b4:0d:87:1f:d7:6f:1f:d8:99:4b:0d:d4:cc:a2:
bf:3d:1f:ad:7a:65:a8:c4:97:f3:91:32:08:fd:b8:c1:2d:25:
1f:fa:52:cc:ff:e9:67:28:a5:e1:9a:54:af:69:56:f5:e2:f5:
5b:38:11:6d:d8:29:7d:5d:c9:e4:47:9f:16:93:60:d5:e5:06:
ad:74:77:1f:f4:c4:54:a7:bf:ce:da:43:23:2e:cd:7b:10:45:
f2:f2:b6:1c:1e:33:b3:3f:96:99:42:90:48:3c:7c:a6:47:52:
01:d0:28:0c:c5:ce:27:f7:30:5e:57:7c:75:8c:c6:f9:b9:bc:
db:61:e1:ce:96:92:c9:d2:cb:14:d5:a4:70:56:91:70:3c:d9:
57:b0:d6:0a:ba:de:4b:8a:0c:44:f9:b2:57:d1:7d:5a:a5:9d:
de:fc:ae:9d:f2:79:7c:52:a0:0c:f9:b0:a9:13:73:f5:22:e0:
ad:7c:99:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Jul 23 12:17:32 2025 by rpki-client